Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/QsDa0zfP3CIFPzkr72ai7j2Kl6U.roa
File: QsDa0zfP3CIFPzkr72ai7j2Kl6U.roa (raw, json)
Hash identifier: fn5rmy47Ww+aAsGYa2AAlXZt65JpDFqVguDudWu94lk=
Subject key identifier: 42:C0:DA:D3:37:CF:DC:22:05:3F:39:2B:EF:66:A2:EE:3D:8A:97:A5
Certificate issuer: /CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Certificate serial: 019937DB7D666A594E8095873BCF075B9708
Authority key identifier: B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/QsDa0zfP3CIFPzkr72ai7j2Kl6U.roa
Signing time: Thu 11 Sep 2025 08:19:15 +0000
ROA not before: Thu 11 Sep 2025 08:19:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30781
IP address blocks: 193.150.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:db:7d:66:6a:59:4e:80:95:87:3b:cf:07:5b:97:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f5bbaa051980bd4811b6655a0f95db36127809
Validity
Not Before: Sep 11 08:19:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42c0dad337cfdc22053f392bef66a2ee3d8a97a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e2:fa:28:ed:3d:cf:a0:29:e7:99:2c:0c:69:
7e:60:84:4f:a0:44:62:f3:b2:4e:d4:25:55:1e:fd:
f2:93:37:48:ac:2b:d9:0d:69:e0:4c:ef:f1:41:05:
7c:eb:87:f8:9e:50:15:13:3e:ce:98:80:69:1c:38:
b6:c2:d8:5f:e7:35:15:38:78:25:9e:d0:31:50:88:
6f:7b:dd:84:94:2b:bc:22:77:33:13:06:9f:a3:04:
95:88:cd:97:a5:34:b3:47:a6:e9:14:af:8e:34:ab:
c0:9f:7d:81:b3:77:63:49:58:e1:81:fa:a8:da:7f:
fd:89:76:b8:62:9f:05:c4:40:c1:f0:d0:64:e3:b4:
48:25:6e:bd:61:cb:c0:d7:6e:18:c4:ed:fa:e9:1f:
40:28:32:af:86:80:7b:37:84:79:31:b1:8f:ce:28:
29:8f:29:c1:ff:fd:8c:01:ac:e2:e3:43:4a:0d:ae:
eb:70:8b:0d:3a:7a:d5:38:78:f8:54:0b:ad:82:b4:
40:25:b1:c9:3b:4c:f6:8a:e2:ed:11:80:58:ea:cd:
16:7f:68:a8:d2:d2:e8:4d:7f:de:59:91:96:75:89:
51:c1:1b:f6:06:c1:14:e1:c6:35:53:08:83:24:8b:
dc:c5:21:db:63:43:21:3e:9c:83:d6:e0:eb:d8:e4:
7c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C0:DA:D3:37:CF:DC:22:05:3F:39:2B:EF:66:A2:EE:3D:8A:97:A5
X509v3 Authority Key Identifier:
keyid:B1:F5:BB:AA:05:19:80:BD:48:11:B6:65:5A:0F:95:DB:36:12:78:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfW7qgUZgL1IEbZlWg-V2zYSeAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/QsDa0zfP3CIFPzkr72ai7j2Kl6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/a071aa-550b-4e18-99ed-0508a2bb47ac/1/sfW7qgUZgL1IEbZlWg-V2zYSeAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.169.0/24
Signature Algorithm: sha256WithRSAEncryption
42:00:c7:a5:5b:5d:b3:da:4f:c1:29:f0:0a:a8:af:06:3a:44:
4f:1d:f3:68:70:8b:c9:d6:9b:ae:cc:3c:34:9d:f3:47:e0:ed:
d8:0b:cd:b9:53:0a:f1:03:14:6a:fa:6d:d5:c5:de:7b:ab:38:
e9:b0:fc:4e:9b:55:ca:71:a4:4a:e9:7a:84:f1:24:0b:e9:13:
12:fa:2c:50:79:49:b0:cf:bb:d7:8a:73:b8:1a:7c:38:12:a3:
bf:b9:a6:a5:02:65:37:b7:7f:74:06:0a:70:e9:00:0c:37:93:
ae:21:0c:39:43:5d:73:0e:1c:d8:e6:77:2a:d7:51:de:02:e2:
5a:aa:c2:9c:7b:e7:1f:11:2d:63:05:df:7b:d6:ab:2c:55:b8:
7f:84:a6:36:01:e2:d2:5a:99:ff:30:30:c3:81:f0:3d:31:a7:
07:1e:5c:c1:0e:29:e0:b8:48:57:c1:e8:33:15:55:71:7a:6f:
19:3a:8f:4b:cb:4b:63:1a:3b:a8:4b:ba:0c:e1:8a:7a:bc:9c:
ce:05:5b:ae:95:95:84:80:36:43:f0:ee:17:64:07:09:30:d2:
fc:15:aa:8c:26:c9:00:31:70:dd:0e:07:30:0d:61:1a:61:e1:
85:df:84:61:30:82:17:d6:41:8d:ec:1f:37:fc:33:c5:b3:8c:
d5:e0:ee:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZk3231mallOgJWHO88HW5cIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxZjViYmFhMDUxOTgwYmQ0ODExYjY2NTVhMGY5NWRiMzYx
Mjc4MDkwHhcNMjUwOTExMDgxOTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmMwZGFkMzM3Y2ZkYzIyMDUzZjM5MmJlZjY2YTJlZTNkOGE5N2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+L6KO09z6Ap55ksDGl+YIRPoERi
87JO1CVVHv3ykzdIrCvZDWngTO/xQQV864f4nlAVEz7OmIBpHDi2wthf5zUVOHgl
ntAxUIhve92ElCu8InczEwafowSViM2XpTSzR6bpFK+ONKvAn32Bs3djSVjhgfqo
2n/9iXa4Yp8FxEDB8NBk47RIJW69YcvA124YxO366R9AKDKvhoB7N4R5MbGPzigp
jynB//2MAazi40NKDa7rcIsNOnrVOHj4VAutgrRAJbHJO0z2iuLtEYBY6s0Wf2io
0tLoTX/eWZGWdYlRwRv2BsEU4cY1UwiDJIvcxSHbY0MhPpyD1uDr2OR8RQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFELA2tM3z9wiBT85K+9mou49ipelMB8GA1UdIwQY
MBaAFLH1u6oFGYC9SBG2ZVoPlds2EngJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQt
MDUwOGEyYmI0N2FjLzEvUXNEYTB6ZlAzQ0lGUHprcjcyYWk3ajJLbDZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hMDcxYWEtNTUwYi00ZTE4LTk5ZWQtMDUwOGEyYmI0N2Fj
LzEvc2ZXN3FnVVpnTDFJRWJabFdnLVYyellTZUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwZapMA0G
CSqGSIb3DQEBCwUAA4IBAQBCAMelW12z2k/BKfAKqK8GOkRPHfNocIvJ1puuzDw0
nfNH4O3YC825UwrxAxRq+m3Vxd57qzjpsPxOm1XKcaRK6XqE8SQL6RMS+ixQeUmw
z7vXinO4Gnw4EqO/uaalAmU3t390Bgpw6QAMN5OuIQw5Q11zDhzY5ncq11HeAuJa
qsKce+cfES1jBd971qssVbh/hKY2AeLSWpn/MDDDgfA9MacHHlzBDinguEhXwegz
FVVxem8ZOo9Ly0tjGjuoS7oM4Yp6vJzOBVuulZWEgDZD8O4XZAcJMNL8FaqMJskA
MXDdDgcwDWEaYeGF34RhMIIX1kGN7B83/DPFs4zV4O59
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:29 2025 by rpki-client